Skip to content
OpenAdvisories
Low · 3.3 CVE-2025-26419 EUVD-2025-27003GHSA-hxmv-65ff-vm98

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to loca…

Published Sep 4, 2025 · Updated Feb 26, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 14, 13 —

References